Aditya RawatandGitHub 02ea482b37 fix: validate projectPath in MCP handler to block sensitive directories (#230) ...

Validate projectPath in getCodeGraph so MCP clients can't open a codegraph in a
sensitive system directory. Guarded with existsSync so nested/not-yet-created
sub-paths still resolve up to the default project (preserves issue #238). Adds
MCP-handler rejection tests (POSIX + Windows-gated); validated on a real
Windows 11 VM.

Closes #230

2026-05-22 14:15:02 -05:00

..

evaluation

feat: Improve multi-term search ranking with co-occurrence boosting and compound matching

2026-04-06 14:27:13 -05:00

integration

fix: bound resolver caches, validate MCP input sizes, add integration tests (#213)

2026-05-22 13:18:26 -05:00

concurrent-locking.test.ts

Self-contained distribution: bundle Node + node:sqlite, drop better-sqlite3/wasm (closes #238) (#282)

2026-05-21 15:48:04 -05:00

context.test.ts

Add evaluation framework and fix call graph extraction

2026-01-18 18:48:22 -06:00

db-perf.test.ts

perf(db): batch node lookups, fix insertNode cache, run maintenance after writes (#108)

2026-05-22 13:16:34 -05:00

drupal.test.ts

feat(frameworks): add Drupal 8/9/10/11 support (#271)

2026-05-21 17:11:19 -05:00

explore-output-budget.test.ts

feat(mcp): line numbers in explore output + per-file cluster fixes (#188)

2026-05-19 17:16:12 -05:00

extraction.test.ts

feat: zero-config indexing driven by .gitignore (#283) (#285)

2026-05-21 18:06:02 -05:00

foundation.test.ts

feat: zero-config indexing driven by .gitignore (#283) (#285)

2026-05-21 18:06:02 -05:00

frameworks-integration.test.ts

feat: wire up framework route extraction (#89)

2026-05-07 22:03:33 -05:00

frameworks.test.ts

feat(frameworks): add NestJS support (#220) (#225)

2026-05-20 17:09:54 -05:00

git-hooks.test.ts

fix(mcp): skip fs.watch on WSL2 /mnt drives that hang MCP startup (#199) (#210)

2026-05-20 10:32:08 -05:00

glyphs.test.ts

fix(cli): ASCII glyph fallback for Windows console mojibake (#168) (#178)

2026-05-19 10:45:20 -05:00

graph.test.ts

Init

2026-01-18 16:25:00 -06:00

installer-targets.test.ts

feat(installer): add codegraph uninstall command (#313) (#318)

2026-05-22 04:51:42 -05:00

installer.test.ts

fix(installer): write Claude project-local MCP config to .mcp.json (#207) (#209)

2026-05-20 09:47:03 -05:00

is-test-file.test.ts

Readme updated and detect test files in kotlin and swift

2026-05-20 18:36:18 -05:00

mcp-initialize.test.ts

fix(mcp): don't block initialize handshake on heavy init (#172) (#177)

2026-05-19 10:20:02 -05:00

mcp-roots.test.ts

fix(mcp): auto-detect project via roots/list when no rootUri (#196) (#214)

2026-05-20 11:35:13 -05:00

node-sqlite-backend.test.ts

Self-contained distribution: bundle Node + node:sqlite, drop better-sqlite3/wasm (closes #238) (#282)

2026-05-21 15:48:04 -05:00

node-version-check.test.ts

Self-contained distribution: bundle Node + node:sqlite, drop better-sqlite3/wasm (closes #238) (#282)

2026-05-21 15:48:04 -05:00

npm-shim.test.ts

fix: self-heal missing platform bundle from GitHub Releases (#303) (#335)

2026-05-22 11:38:28 -05:00

pr19-improvements.test.ts

Self-contained distribution: bundle Node + node:sqlite, drop better-sqlite3/wasm (closes #238) (#282)

2026-05-21 15:48:04 -05:00

resolution.test.ts

feat(resolution): tsconfig path aliases + re-export chain following (#130)

2026-05-07 20:53:16 -05:00

search-query-parser.test.ts

feat(search): field-qualified queries (kind:/lang:/path:/name:) + fuzzy typo fallback (#131)

2026-05-07 20:35:49 -05:00

security.test.ts

fix: validate projectPath in MCP handler to block sensitive directories (#230)

2026-05-22 14:15:02 -05:00

sqlite-backend.test.ts

Self-contained distribution: bundle Node + node:sqlite, drop better-sqlite3/wasm (closes #238) (#282)

2026-05-21 15:48:04 -05:00

strip-comments.test.ts

feat: wire up framework route extraction (#89)

2026-05-07 22:03:33 -05:00

symbol-lookup.test.ts

Self-contained distribution: bundle Node + node:sqlite, drop better-sqlite3/wasm (closes #238) (#282)

2026-05-21 15:48:04 -05:00

sync.test.ts

feat: zero-config indexing driven by .gitignore (#283) (#285)

2026-05-21 18:06:02 -05:00

wasm-runtime-flags.test.ts

fix: prevent V8 turboshaft WASM Zone OOM during indexing (#298, #293) (#322)

2026-05-22 05:39:24 -05:00

watch-policy.test.ts

feat: zero-config indexing driven by .gitignore (#283) (#285)

2026-05-21 18:06:02 -05:00

watcher.test.ts

feat: zero-config indexing driven by .gitignore (#283) (#285)

2026-05-21 18:06:02 -05:00